Lucene search
+L

1235 matches found

NVD
NVD
added 2023/06/22 12:15 p.m.23 views

CVE-2023-28776

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/22 12:15 p.m.21 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/22 11:29 a.m.15 views

CVE-2023-28776 WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/22 11:29 a.m.65 views

CVE-2023-28776

CVE-2023-28776: Unauthenticated reflected XSS in WordPress plugin Continuous Image Carousel With Lightbox (

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/22 12:0 a.m.8 views

WordPress plugin Continuous Image Carousel With Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/06 6:45 a.m.4 views

Malicious code in fc-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a2785c7e8c78df5cfa8a857c26d48505e4e03213f1264005d80f26ea230cdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/06/06 6:45 a.m.7 views

MAL-2023-334 Malicious code in fc-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a2785c7e8c78df5cfa8a857c26d48505e4e03213f1264005d80f26ea230cdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2023/05/16 3:15 a.m.6 views

CVE-2023-2710

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS7AI score0.00612EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/05/16 3:15 a.m.4 views

CVE-2023-2710

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS7AI score0.00612EPSS
SaveExploits0References4
Prion
Prion
added 2023/05/16 3:15 a.m.19 views

Cross site scripting

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

5.8CVSS6AI score0.00612EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/16 12:0 a.m.6 views

PT-2023-20954 · WordPress · Video Carousel Slider With Lightbox

Name of the Vulnerable Software and Affected Versions: Video Carousel Slider with Lightbox plugin for WordPress versions up to, and including, 1.0.22 Description: The issue is related to Reflected Cross-Site Scripting via the search term parameter due to insufficient input sanitization and output...

6.1CVSS6.5AI score0.00612EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/05/16 12:0 a.m.9 views

WordPress plugin video carousel slider with lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS7AI score0.00612EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/15 1:15 p.m.8 views

CVE-2023-1915

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting vulnerability which could be used against high privilege users such as admin...

6.1CVSS7.3AI score0.00477EPSS
SaveExploits2References1
NVD
NVD
added 2023/05/15 1:15 p.m.23 views

CVE-2023-1915

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting vulnerability which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00477EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2023/05/15 12:15 p.m.12 views

CVE-2023-1915 Thumbnail carousel slider < 1.1.10 - Reflected XSS

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting vulnerability which could be used against high privilege users such as admin...

6AI score0.00477EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/05/15 12:15 p.m.33 views

CVE-2023-1915 Thumbnail carousel slider < 1.1.10 - Reflected XSS

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting vulnerability which could be used against high privilege users such as admin...

6.1AI score0.00477EPSS
SaveExploits2References1
CVE
CVE
added 2023/05/15 12:15 p.m.94 views

CVE-2023-1915

CVE-2023-1915 affects the WordPress plugin Thumbnail carousel slider (versions before 1.1.10). The issue is caused by insufficient sanitisation/escaping of certain parameters before echoing them in pages, enabling a Reflected XSS that could target high-privilege users such as admins. The vulnerab...

6.1CVSS6AI score0.00477EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/05/15 12:0 a.m.15 views

video carousel slider with lightbox < 1.0.23 - Reflected XSS

The plugin does not sanitise and escape the searchterm parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00612EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/15 12:0 a.m.10 views

PT-2023-17336 · WordPress · Thumbnail Carousel Slider

Name of the Vulnerable Software and Affected Versions: Thumbnail carousel slider WordPress plugin versions prior to 1.1.10 Description: The issue is related to Reflected Cross-Site Scripting, where some parameters are not properly sanitised and escaped before being outputted back in pages. This...

6.1CVSS9.2AI score0.00477EPSS
SaveExploits2References5
Patchstack
Patchstack
added 2023/05/15 12:0 a.m.17 views

WordPress video carousel slider with lightbox Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)

Software video carousel slider with lightbox Type Plugin Vulnerable versions = 1.0.22 Fixed in 1.0.23 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32797 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 914412fc8def...

7.1CVSS5.7AI score0.00309EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder